Privacy Policy

Kuro ("Kuro", "we", "us" or "our") is an AI customer-engagement platform operated by Curocode, based in Dubai, United Arab Emirates. This Privacy Policy explains how we collect, use, share and protect personal information when you use our website, dashboard and the AI chat agent we provide to businesses.

We act in two roles. For the businesses that subscribe to Kuro (our "Customers"), we are a data controller of their account information and a data processor of the conversations their own end-users have with their AI agent. For visitors who chat with an agent powered by Kuro, the business operating that agent is the controller of the conversation, and Kuro processes that data on their behalf.

Account information — when you sign up, we collect your name, business name, email address, hashed password and chosen plan.

Conversation data — messages exchanged between visitors and the AI agent, including any text, emoji, and (on eligible plans) images uploaded during a chat.

Knowledge base content — the business information, FAQs, menus, pricing and documents you provide to train your agent.

Usage and technical data — log data such as IP address, browser type, device information, pages visited, and timestamps, collected to operate and secure the service.

• We do not ask you to enter payment card numbers, bank details or government IDs into the chat agent.
• We do not knowingly collect data from children under 16.

• To provide, operate and maintain the Kuro service and your AI agent.
• To generate AI responses to customer enquiries in real time.
• To capture and score leads, bookings and enquiries for the business.
• To send service and verification emails (for example, the email-verification code at sign-up).
• To monitor usage, prevent abuse and enforce plan limits.
• To improve reliability, security and the quality of the product.

We do not sell your personal information, and we do not use the private contents of your conversations to train third-party foundation models.

Kuro relies on trusted third-party providers to deliver the service — including AI providers to generate agent responses, and infrastructure providers for hosting, data storage, email delivery, and (where enabled) messaging channels such as WhatsApp, Instagram and Facebook.

Conversation content may be transmitted to AI providers solely to generate a response. Each provider processes data only as needed to perform its function and under its own security and privacy commitments. We do not sell your data or use the private contents of your conversations to train third-party foundation models.

We retain account information for as long as your account is active. Conversation and lead data is retained while it is useful to the business operating the agent, and may be purged on a rolling basis. Images uploaded in chats are subject to automatic retention limits and are periodically purged.

When a business closes its account, associated data is deleted or anonymised within a reasonable period, except where we must retain it to comply with legal obligations.

We use a small number of essential cookies and browser local-storage entries — for example, to keep you signed in, remember your theme preference, and operate the chat widget. We do not use advertising or cross-site tracking cookies. Where a consent banner is shown, non-essential storage is disabled until you agree.

We protect your data with industry-standard measures: encryption in transit (HTTPS), hashed passwords, scoped access tokens, rate limiting, email verification and least-privilege access to production systems. No method of transmission or storage is completely secure, but we work continuously to safeguard your information.

Depending on your location, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details below.

If you are an end-user who chatted with a Kuro-powered agent, please direct your request to the business that operates that agent; we will assist them as their processor.

Kuro is operated from the UAE and uses infrastructure hosted in the European Union and other regions. Where data is transferred across borders, we rely on appropriate safeguards required by applicable law.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page and, where appropriate, by notifying you directly.

If you have any questions about this Privacy Policy or how we handle your data, contact us at privacy@curocode.com.

Kuro by Curocode · Dubai, United Arab Emirates.